This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/7ADjcGjapwR6k_5fc3WP8tJquo4.roa File: 7ADjcGjapwR6k_5fc3WP8tJquo4.roa (raw, json) Hash identifier: 7nrtz+eCX1YNAaL+/9GmOx6PPSoMeR+1jbxpBwc7gF0= Subject key identifier: EC:00:E3:70:68:DA:A7:04:7A:93:FE:5F:73:75:8F:F2:D2:6A:BA:8E Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC8892AC5EED454DC106E82BAED6C18 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/7ADjcGjapwR6k_5fc3WP8tJquo4.roa Signing time: Fri 02 Jan 2026 08:17:32 +0000 ROA not before: Fri 02 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204941 IP address blocks: 91.108.34.0/24 maxlen: 24 91.108.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:89:2a:c5:ee:d4:54:dc:10:6e:82:ba:ed:6c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec00e37068daa7047a93fe5f73758ff2d26aba8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:4e:8d:de:f2:8f:3e:60:83:79:df:a3:5e: 23:51:de:b9:a8:25:f3:2e:dd:fe:d8:84:37:35:08: b7:25:97:e1:ee:aa:c3:10:27:fe:b1:8e:f0:fb:83: 5a:a7:50:76:12:f6:57:d9:75:3d:1b:4c:39:76:e2: 13:93:f6:57:88:7f:00:fb:43:4a:fe:f6:df:90:e8: 48:6e:e4:90:a4:5a:48:97:30:69:36:e8:5a:4a:3e: ed:18:8e:63:3a:9b:94:26:5d:a2:fe:89:79:5f:59: 57:89:ed:28:95:32:b4:f6:4e:a9:92:47:70:bd:70: fc:d6:9f:ba:ff:f8:2a:69:28:b3:48:1d:9a:4c:10: bb:e5:52:da:8d:5d:f2:a4:0f:91:87:af:e9:56:72: 99:07:3e:41:66:48:e3:d3:8c:7b:28:32:fc:75:d2: a2:a9:fd:b4:ff:39:f0:90:fc:2b:e7:3a:7a:80:84: 61:4e:b2:4d:37:a2:eb:bc:53:1c:d2:0c:6f:36:13: a2:bc:74:ba:71:c3:67:4f:46:c3:df:ea:7a:21:a5: 87:61:cd:ae:71:96:33:6e:a3:e8:6d:a4:da:6f:56: 6b:ca:05:b7:d5:81:43:a4:66:60:8c:d9:14:56:47: 95:b9:e4:f5:c9:7f:03:aa:f7:98:7a:43:ce:84:7a: 33:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:00:E3:70:68:DA:A7:04:7A:93:FE:5F:73:75:8F:F2:D2:6A:BA:8E X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/7ADjcGjapwR6k_5fc3WP8tJquo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.34.0/24 91.108.53.0/24 Signature Algorithm: sha256WithRSAEncryption 13:2b:35:22:e9:35:f8:bc:35:c1:34:1e:8b:9d:c0:49:ba:b8: fb:54:5e:6b:46:d2:00:22:cf:00:62:1b:89:bb:67:73:42:a4: 0c:74:c1:29:d4:9d:f6:61:9d:f9:9e:79:b8:9e:95:c4:2b:0a: 12:30:43:ac:8e:9b:ec:d7:58:d7:a3:e1:a0:39:3b:08:2f:d4: eb:eb:d5:09:62:2b:58:50:8f:e2:0b:7f:86:c7:93:ed:1e:6c: c9:d7:d9:ae:ee:91:e9:11:c4:4a:32:28:2f:69:02:34:2a:8d: e8:ea:34:2a:c5:25:6c:fd:61:9c:86:17:89:19:cb:ab:86:0f: cc:27:00:3f:2c:cf:bd:9b:54:c1:76:b3:e6:5a:a5:48:9b:4e: 76:5e:3a:87:cd:4b:33:21:7e:8d:eb:23:50:04:f2:69:d1:fa: fa:a1:47:1a:af:cd:fb:cf:4c:71:24:0e:20:10:c9:09:21:01: fe:ac:8e:36:2e:ae:05:5e:0a:58:87:44:f1:2e:da:fe:25:92: b9:14:ff:3f:d5:8c:c8:90:94:ef:a5:fe:85:8b:61:2a:52:44: 1c:81:fb:8c:32:c0:95:4f:38:ea:38:48:bc:32:a9:ed:8f:43: 14:62:62:9b:a4:18:57:66:e5:7d:d7:09:76:0c:35:02:4c:15: 66:69:42:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yIkqxe7UVNwQboK67WwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzAwZTM3MDY4ZGFhNzA0N2E5M2ZlNWY3Mzc1OGZmMmQyNmFiYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGBOjd7yjz5gg3nfo14jUd65qCXz Lt3+2IQ3NQi3JZfh7qrDECf+sY7w+4Nap1B2EvZX2XU9G0w5duITk/ZXiH8A+0NK /vbfkOhIbuSQpFpIlzBpNuhaSj7tGI5jOpuUJl2i/ol5X1lXie0olTK09k6pkkdw vXD81p+6//gqaSizSB2aTBC75VLajV3ypA+Rh6/pVnKZBz5BZkjj04x7KDL8ddKi qf20/znwkPwr5zp6gIRhTrJNN6LrvFMc0gxvNhOivHS6ccNnT0bD3+p6IaWHYc2u cZYzbqPobaTab1ZrygW31YFDpGZgjNkUVkeVueT1yX8DqveYekPOhHozjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOwA43Bo2qcEepP+X3N1j/LSarqOMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvN0FEamNHamFwd1I2a181ZmMzV1A4dEpxdW80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2wiAwQA W2w1MA0GCSqGSIb3DQEBCwUAA4IBAQATKzUi6TX4vDXBNB6LncBJurj7VF5rRtIA Is8AYhuJu2dzQqQMdMEp1J32YZ35nnm4npXEKwoSMEOsjpvs11jXo+GgOTsIL9Tr 69UJYitYUI/iC3+Gx5PtHmzJ19mu7pHpEcRKMigvaQI0Ko3o6jQqxSVs/WGchheJ Gcurhg/MJwA/LM+9m1TBdrPmWqVIm052XjqHzUszIX6N6yNQBPJp0fr6oUcar837 z0xxJA4gEMkJIQH+rI42Lq4FXgpYh0TxLtr+JZK5FP8/1YzIkJTvpf6Fi2EqUkQc gfuMMsCVTzjqOEi8Mqntj0MUYmKbpBhXZuV91wl2DDUCTBVmaUJm -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:36 2026 by rpki-client